ICUICU
critical

co.dockai/mcp

v0.1.0

Discover MCP endpoints for real-world entities by resolving business domains.

MCP RegistrydockaiFirst seen Feb 24, 2026Source

7

Total

1

Critical

2

High

4

Medium

Findings

unknown
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    6: .eggs/
    7: .vercel
>>> 8: .env
Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: ��^��'��m��-��%

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: ��b~'�*'��h�T^��m

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.6 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumNS-001Network SuspiciousMedium ConfidenceLine 0

Python requests library HTTP call

Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.

    214:                 if (data.jsonrpc === "2.0") {
    215:                     if (data.id && pendingRequests.has(data.id)) {
>>> 216:                         const handlers = pendingRequests.get(data.id);
    217:                         pendingRequests.delete(data.id);
    218: 
Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.6 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumOB-001ObfuscationMedium ConfidenceLine 0

Possible Base64-encoded payload (long encoded string)

Detected by automated pattern matching (rule OB-001) with medium confidence. May be a false positive.

    24: 
    25: # MCP Server Card (SEP-1649)
>>> 26: # https://github.com/modelcontextprotocol/modelcontextprotocol/issues/1649
    27: SERVER_CARD = {
    28:     "$schema": "https://static.modelcontextprotocol.io/schemas/mcp-server-card/v1.json",
Report false positive

Scan History

DateRiskFindings
Feb 26, 2026critical7
Feb 24, 2026critical7